chore(deps): bump @modelcontextprotocol/sdk and @angular/cli by dependabot[bot] · Pull Request #3553 · numbersprotocol/capture-cam

dependabot · 2026-10-22T04:24:33Z

Removes @modelcontextprotocol/sdk. It's no longer used after updating ancestor dependency @angular/cli. These dependencies need to be updated together.

Removes @modelcontextprotocol/sdk

Updates @angular/cli from 22.1.8 to 22.2.5

Release notes

Sourced from @angular/cli's releases.

22.2.5

@schematics/angular

Commit Description

avoid adding web worker snippet to server configuration files

ignore non-workspace stylesheet entries when adding Tailwind

include the SSR entry file in the trust-proxy-headers migration

include the type separator in the class spec import

keep the default getter access type of spyOnProperty in refactor-jasmine-vitest

migrate CallInfo returnValue and object in refactor-jasmine-vitest

migrate spy.calls.first().args in refactor-jasmine-vitest

set explicit type for the module --route component

set explicit type for the app-shell component

@angular/cli

Commit Description

explain how to pick a project when a schematic cannot determine one

handle bun registry error output and 404 detection

support resolving subproject dependencies in bun workspaces

@angular-devkit/build-angular

Commit Description

resolve dev-server sslKey and sslCert relative to the workspace root (#34399)

@angular-devkit/core

Commit Description

only invoke smart default provider when value is undefined

@angular-devkit/schematics

Commit Description

support delegating trees in partition (#34539)

support delegating trees in the filter rule (#34539)

@angular/build

Commit Description

escape prerender redirect URLs

include the oxc-parser WASI binding as an optional dependency

only require karma-coverage when coverage is enabled

resolve dev-server sslKey and sslCert relative to the workspace root (#34399)

serialize server manifest asset paths

suggest the istanbul provider in the unit-test V8 browser coverage error

warn about unsupported options in the unit-test karma runner

write the stats file in a stable, deterministic order

avoid duplicate Domino bundling in server bundles

avoid web worker channel overhead in library parallel compilation

@angular/ssr

Commit Description

preserve trailing slashes in query and fragment of redirect URLs

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

22.2.5 (2026-10-28)

@angular/cli

Commit Type Description

7efeeb9caa fix explain how to pick a project when a schematic cannot determine one

ee61e328ac fix handle bun registry error output and 404 detection

0d8898c289 fix support resolving subproject dependencies in bun workspaces

@schematics/angular

Commit Type Description

982c3dcbfc fix avoid adding web worker snippet to server configuration files

18e5dc6fe8 fix ignore non-workspace stylesheet entries when adding Tailwind

dd18bda9db fix include the SSR entry file in the trust-proxy-headers migration

b7e24561e7 fix include the type separator in the class spec import

7f3840c70c fix keep the default getter access type of spyOnProperty in refactor-jasmine-vitest

eaf2343be4 fix migrate CallInfo returnValue and object in refactor-jasmine-vitest

6680d289cb fix migrate spy.calls.first().args in refactor-jasmine-vitest

9cba0da43f fix set explicit type for the module --route component

e9ae950364 fix set explicit type for the app-shell component

@angular-devkit/build-angular

Commit Type Description

0c4bd19ace fix resolve dev-server sslKey and sslCert relative to the workspace root (#34399)

@angular-devkit/core

Commit Type Description

ad04d689bb fix only invoke smart default provider when value is undefined

@angular-devkit/schematics

Commit Type Description

e7fd1bd9cb fix support delegating trees in partition (#34539)

1854c1714d fix support delegating trees in the filter rule (#34539)

@angular/build

Commit Type Description

6d45d1007f fix escape prerender redirect URLs

6298fb89e6 fix include the oxc-parser WASI binding as an optional dependency

325f6a0f48 fix only require karma-coverage when coverage is enabled

... (truncated)

Commits

9e8eea0 release: cut the v22.2.5 release
e3134b4 fix(@angular/build): warn about unsupported options in the unit-test karma ru...
199775b build: update dependency webpack-dev-middleware to v8.5.0
7efeeb9 fix(@angular/cli): explain how to pick a project when a schematic cannot dete...
6298fb8 fix(@angular/build): include the oxc-parser WASI binding as an optional depen...
7f3840c fix(@schematics/angular): keep the default getter access type of spyOnPropert...
325f6a0 fix(@angular/build): only require karma-coverage when coverage is enabled
e7fd1bd fix(@angular-devkit/schematics): support delegating trees in partition (#34...
1854c17 fix(@angular-devkit/schematics): support delegating trees in the filter rul...
9701ae9 docs(@angular-devkit/build-angular): correct browser-esbuild statsJson descri...
Additional commits viewable in compare view

numbers-official

Automated Code Review (Heartbeat Deep Check)

Reviewed the diff: @angular/cli bumped from ^22.1.7 → ^22.2.5 (minor) in root package.json + package-lock.json. Transitive updates include @angular-devkit/schematics 22.1.8→22.2.5, @schematics/angular 22.1.8→22.2.5, @angular-devkit/architect 0.2201.8→0.2202.5, @inquirer/prompts 8.5.2→8.7.2, @listr2/prompt-adapter-inquirer 4.2.5→4.2.7, listr2 11.0.0→11.1.0, zod 4.4.3→4.6.6, and a notable swap from @modelcontextprotocol/sdk@1.30.0 to @modelcontextprotocol/server@2.3.1 inside the Angular CLI's own node_modules. Dev-only — all nested under devDependencies. No source code changes.

Findings

No regression risks, bugs, or security concerns identified. GitHub Actions checks on current head are all SUCCESS: changes, Normalize npm lockfile, lint, android, test; ios SKIPPED (same handling as prior Dependabot PRs); CodeQL NEUTRAL (informational). mergeStateStatus=CLEAN, mergeable=MERGEABLE.
Note: @angular/cli 22.2.x stays within the project's ^22.1.6 Angular runtime range, so no peer-dep lockstep hazard like the one blocking #3550. The CLI version intentionally runs ahead of the framework per Angular's release model.

Summary

LGTM from automated review. Safe to merge once a human approves. Advisory review only — does not count as approval.

numbers-official

Automated Code Review (Heartbeat Deep Check)

Reviewed the diff: @angular/cli bumped from ^22.1.7 → ^22.2.5 (minor) in root package.json + package-lock.json. Transitive updates include @angular-devkit/schematics 22.1.8→22.2.5, @schematics/angular 22.1.8→22.2.5, @angular-devkit/architect 0.2201.8→0.2202.5, @inquirer/prompts 8.5.2→8.7.2, @listr2/prompt-adapter-inquirer 4.2.5→4.2.7, listr2 11.0.0→11.1.0, zod 4.4.3→4.6.6, and a notable swap from @modelcontextprotocol/sdk@1.30.0 to @modelcontextprotocol/server@2.3.1 inside the Angular CLI's own node_modules. Dev-only — all nested under devDependencies. No source code changes.

Findings

No regression risks, bugs, or security concerns identified. GitHub Actions checks on current head are all SUCCESS: changes, Normalize npm lockfile, lint, android, test; ios SKIPPED (same handling as prior Dependabot PRs); CodeQL NEUTRAL (informational). mergeStateStatus=CLEAN, mergeable=MERGEABLE.
Note: @angular/cli 22.2.x stays within the project's ^22.1.6 Angular runtime range, so no peer-dep lockstep hazard like the one blocking #3550. The CLI version intentionally runs ahead of the framework per Angular's release model.

Summary

LGTM from automated review. Safe to merge once a human approves. Advisory review only — does not count as approval.

Removes [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk). It's no longer used after updating ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together. Removes `@modelcontextprotocol/sdk` Updates `@angular/cli` from 22.1.8 to 22.2.5 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/v22.2.5/CHANGELOG.md) - [Commits](angular/angular-cli@v22.1.8...v22.2.5) --- updated-dependencies: - dependency-name: "@angular/cli" dependency-version: 22.2.3 dependency-type: direct:development - dependency-name: "@modelcontextprotocol/sdk" dependency-version: dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026

dependabot Bot mentioned this pull request Oct 22, 2026

chore(deps): bump @modelcontextprotocol/sdk and @angular/cli #3548

Closed

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-a9ad008993 branch 3 times, most recently from 5e133b4 to 542fabb Compare October 28, 2026 10:29

numbers-official reviewed Oct 28, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-a9ad008993 branch from 542fabb to 78c265e Compare November 4, 2026 07:11

Navigation Menu

Repository navigation

chore(deps): bump @modelcontextprotocol/sdk and @angular/cli - #3553

chore(deps): bump @modelcontextprotocol/sdk and @angular/cli#3553
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a9ad008993

dependabot Bot commented on behalf of github Oct 22, 2026 •

edited

Loading

Uh oh!

numbers-official left a comment

Uh oh!

numbers-official left a comment

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	avoid adding web worker snippet to server configuration files
	ignore non-workspace stylesheet entries when adding Tailwind
	include the SSR entry file in the trust-proxy-headers migration
	include the type separator in the class spec import
	keep the default getter access type of spyOnProperty in refactor-jasmine-vitest
	migrate CallInfo returnValue and object in refactor-jasmine-vitest
	migrate spy.calls.first().args in refactor-jasmine-vitest
	set explicit type for the `module --route` component
	set explicit type for the app-shell component

Commit	Description
	explain how to pick a project when a schematic cannot determine one
	handle bun registry error output and 404 detection
	support resolving subproject dependencies in bun workspaces

Commit	Description
	support delegating trees in `partition` (#34539)
	support delegating trees in the `filter` rule (#34539)

Commit	Description
	escape prerender redirect URLs
	include the oxc-parser WASI binding as an optional dependency
	only require karma-coverage when coverage is enabled
	resolve dev-server `sslKey` and `sslCert` relative to the workspace root (#34399)
	serialize server manifest asset paths
	suggest the istanbul provider in the unit-test V8 browser coverage error
	warn about unsupported options in the unit-test karma runner
	write the stats file in a stable, deterministic order
	avoid duplicate Domino bundling in server bundles
	avoid web worker channel overhead in library parallel compilation

Commit	Type	Description
7efeeb9caa	fix	explain how to pick a project when a schematic cannot determine one
ee61e328ac	fix	handle bun registry error output and 404 detection
0d8898c289	fix	support resolving subproject dependencies in bun workspaces

Commit	Type	Description
982c3dcbfc	fix	avoid adding web worker snippet to server configuration files
18e5dc6fe8	fix	ignore non-workspace stylesheet entries when adding Tailwind
dd18bda9db	fix	include the SSR entry file in the trust-proxy-headers migration
b7e24561e7	fix	include the type separator in the class spec import
7f3840c70c	fix	keep the default getter access type of spyOnProperty in refactor-jasmine-vitest
eaf2343be4	fix	migrate CallInfo returnValue and object in refactor-jasmine-vitest
6680d289cb	fix	migrate spy.calls.first().args in refactor-jasmine-vitest
9cba0da43f	fix	set explicit type for the `module --route` component
e9ae950364	fix	set explicit type for the app-shell component

Commit	Type	Description
e7fd1bd9cb	fix	support delegating trees in `partition` (#34539)
1854c1714d	fix	support delegating trees in the `filter` rule (#34539)

Commit	Type	Description
6d45d1007f	fix	escape prerender redirect URLs
6298fb89e6	fix	include the oxc-parser WASI binding as an optional dependency
325f6a0f48	fix	only require karma-coverage when coverage is enabled

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

22.2.5

@​schematics/angular

@​angular/cli

@​angular-devkit/build-angular

@​angular-devkit/core

@​angular-devkit/schematics

@​angular/build

@​angular/ssr

22.2.5 (2026-10-28)

@​angular/cli

@​schematics/angular

@​angular-devkit/build-angular

@​angular-devkit/core

@​angular-devkit/schematics

@​angular/build

Uh oh!

numbers-official left a comment

Choose a reason for hiding this comment

Automated Code Review (Heartbeat Deep Check)

Findings

Summary

Uh oh!

numbers-official left a comment

Choose a reason for hiding this comment

Automated Code Review (Heartbeat Deep Check)

Findings

Summary

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 22, 2026 •

edited

Loading

`@schematics/angular`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular-devkit/core`

`@angular-devkit/schematics`

`@angular/build`

`@angular/ssr`

`@angular/cli`

`@schematics/angular`

`@angular-devkit/build-angular`

`@angular-devkit/core`

`@angular-devkit/schematics`

`@angular/build`